Pieter Wuille and Tim Ruffing, Schnorr, MuSig, FROST and more - Episode 26
The Chaincode Podcast
00:00
Cross-Input Signature Aggregation
The original motivation was to have cross-input signature aggregation. Even if there are multiple parties, even if the transaction is like spending coins from multiple separate coins together, we want a single signature for all of them. The difference is the aggregation of the keys done off-chain or on-chain. You can't do it off-chain because you don't know ahead of time which outputs are going to be spent together.
Transcript
Play full episode
